What kind of answer would you expect, in all seriousness? The thing you are reporting is not illegal or even dodgy.
I used to spend time on custom iptables scripts but came to the conclusion it’s much better to just architect things in a way where the bots and scanners can’t plausibly create a problem and then ignoring them.
There may be more realistic ways to go about protecting people's SSH servers that trying to dox Cloudflare VPN users.
I think OP guessed it was probably not Cloudflare themselves scanning their ports, so I think that's what they meant by "hear who and why".
Maybe dox is too strong a word. My point is, from what I've heard, the general sentiment is that you're unlikely to get any information about customers just by sending abuse reports to Cloudflare.